
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier: +OFTcIOEDBFGabzUcE3bouSG/bcrIpzWTcO4rO7x1qk=
Subject key identifier: 88:58:09:A9:56:0E:C9:2C:A1:F3:7F:DC:99:B5:15:33:F9:E7:84:AF
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial: 0520
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number: 04F1
Signing time: Mon 28 Sep 2026 23:53:08 +0000
Manifest this update: Mon 28 Sep 2026 23:53:07 +0000
Manifest next update: Mon 05 Oct 2026 23:53:07 +0000
Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: 0YGTvSB+KbbghMqcj8Uyzng2t9DkEXblewLk5V++FT4=)
2: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: fdGiVPweujLtnlzQBkxSdHNbQU/GitI5AIHJtY/ChyQ=)
3: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: ZfXqil/HZcQKRq3QzpskMCnsaTW6MQfjBYeGj9Tkbjo=)
4: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: TYYIQ0iKctVFngYjoXqXM7SKx8woLPPUnuROtzeNaq4=)
5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: 3u67oMwzGOz5a39ev00s5EB6ZROVZTn6ToX//42/CIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Validity
Not Before: Sep 28 23:53:07 2026 GMT
Not After : Oct 5 23:53:07 2026 GMT
Subject: CN=6abafde3-0ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:db:04:68:42:b0:ee:c4:86:84:a8:6d:15:
e6:ed:2a:3d:69:91:a3:a5:a1:d8:60:57:31:41:d7:
48:ec:43:cd:65:d8:f9:29:c2:62:45:9c:8b:85:25:
f3:37:87:f9:07:1a:a0:b7:ed:7c:97:a8:61:98:13:
74:5c:de:44:83:8d:c9:f3:9c:8f:a8:18:9c:51:53:
41:2c:cd:92:08:8f:5d:58:8f:38:0b:09:cd:9b:de:
62:6d:87:8d:b7:06:b1:d5:dc:58:7e:9a:d6:80:71:
77:d4:30:ef:f2:cd:d9:c4:dc:6f:e4:23:82:fe:6e:
58:1c:9e:cd:a3:73:b1:27:5b:d7:58:7e:7c:29:98:
8b:0f:7f:b8:64:e0:38:ee:a3:4b:14:c8:c3:2b:87:
20:f4:0d:19:17:55:64:35:47:8f:a0:66:50:7d:3f:
63:28:82:e9:d9:0a:1b:05:3f:c4:a5:fd:dd:da:c4:
21:65:b7:16:ca:5e:3e:e8:a5:6c:8a:e7:dd:50:29:
21:21:19:a2:bd:37:56:80:f6:c2:c3:26:9a:16:a8:
7c:1f:a5:f9:8d:af:96:5e:f4:09:ee:03:80:ab:0e:
1b:a2:7a:80:1f:3b:07:be:27:bc:22:23:e7:20:0b:
84:63:13:fa:16:d6:44:85:9b:73:5f:9f:39:e1:23:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:58:09:A9:56:0E:C9:2C:A1:F3:7F:DC:99:B5:15:33:F9:E7:84:AF
X509v3 Authority Key Identifier:
keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:93:ff:8d:f8:2c:a4:d9:14:ae:91:55:5f:68:c1:ef:f6:c5:
d1:ee:e7:3b:9c:71:df:9c:cd:88:79:e5:00:4b:bb:51:a6:94:
0c:42:4b:b3:33:fe:6b:20:b6:39:3b:7c:a6:7e:94:a4:7e:52:
21:2c:39:6d:9d:fd:ff:a2:ab:da:09:06:0d:7a:92:e0:10:78:
ca:48:ea:dc:79:a3:9e:a1:b5:cb:fd:29:6c:f8:2a:70:2f:41:
70:09:e0:95:db:7e:be:91:1d:cd:ac:41:cd:fb:6b:23:05:d7:
f7:1e:f8:33:06:21:5d:35:bd:6a:50:c6:c1:28:9d:fd:b2:d2:
56:e7:42:7b:eb:bc:fb:c4:2d:9b:e7:36:87:a6:cc:df:f0:8c:
e1:62:10:39:69:39:c0:2a:84:3d:3a:f3:06:27:2c:31:b8:de:
af:95:aa:25:60:c8:9f:4f:6b:07:5f:87:94:db:76:9b:e3:87:
c7:61:08:03:0c:4e:a7:c5:ed:36:8c:cb:c5:84:d0:f3:0d:15:
01:26:1c:1d:43:2d:fa:a0:5e:50:25:87:a2:80:b0:fd:5c:fd:
9e:12:0c:f9:6b:4c:8e:cc:93:f5:10:2e:cd:ec:d3:78:8b:e9:
b1:e6:07:8f:62:45:5c:d8:89:06:14:43:2f:a1:58:1c:fd:b5:
fa:96:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:11:03 2026 by rpki-client